
$ rpki-client -vvf rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/C4ADE9F6BC6C11F0A0E57E30C4F9AE02.roa
File: C4ADE9F6BC6C11F0A0E57E30C4F9AE02.roa (raw, json)
Hash identifier: QQD+HK4WN4jCMXTqepne7XvoWo6FYRtiqfAUfqJBvOo=
Subject key identifier: A1:00:49:90:D2:F4:79:46:D4:20:49:89:E0:87:BE:01:74:AA:93:85
Certificate issuer: /CN=A912675B/serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
Certificate serial: 0809
Authority key identifier: E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/C4ADE9F6BC6C11F0A0E57E30C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:52:58 +0000
ROA not before: Sat 08 Nov 2025 06:32:59 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 133605
IP address blocks: 103.138.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl
rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2057 (0x809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912675B, serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
Validity
Not Before: Nov 8 06:32:59 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a452ca-5006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:06:46:3d:f0:de:fb:82:3f:dc:fc:cd:5e:d7:
ae:4f:67:bd:e2:f4:3f:c3:b3:7d:af:09:58:b9:ae:
15:59:1d:09:95:bf:cf:5a:d6:75:b5:13:c5:38:9c:
42:e4:81:60:4d:57:d9:df:18:a3:cd:5c:a0:38:40:
de:4a:91:7f:31:0e:a1:d4:ee:64:b0:e7:91:ee:a0:
b3:e8:06:cf:33:6e:af:82:81:6c:82:15:cb:38:37:
c0:71:ea:7b:2d:4e:b1:50:b7:a6:02:a6:4a:cc:f8:
d9:f9:9d:35:06:cf:4c:6f:fd:54:0c:60:0e:a5:e3:
99:35:7e:4f:81:c8:89:91:21:38:1e:f7:ee:62:c3:
a1:f2:49:c0:61:f3:6a:71:7a:78:b0:18:45:d5:8b:
0c:c6:d6:84:9d:e1:f0:6b:09:1c:41:06:14:d7:b4:
58:7d:46:81:f8:56:bb:49:43:2d:1d:a3:7b:1b:fd:
50:bf:8f:3f:f4:0b:10:cb:64:77:da:f2:30:8a:bb:
47:bd:25:d9:14:e3:23:1d:1f:8b:d2:f3:94:38:26:
77:c7:96:49:70:a4:a1:13:2b:7c:da:ba:73:cf:6f:
c9:66:f2:9a:5c:1e:18:64:16:ca:b7:bb:8c:39:f7:
6e:37:e8:da:55:24:6a:7d:cc:46:04:7c:cb:a7:52:
fc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:00:49:90:D2:F4:79:46:D4:20:49:89:E0:87:BE:01:74:AA:93:85
X509v3 Authority Key Identifier:
keyid:E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/C4ADE9F6BC6C11F0A0E57E30C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.170.0/24
Signature Algorithm: sha256WithRSAEncryption
79:79:2d:4e:50:e2:1c:b0:01:6f:cf:cd:99:d8:a9:81:c2:e2:
0a:77:b3:11:70:5d:e0:9b:63:ba:33:9a:c0:99:e0:71:ca:fa:
ba:ad:bd:9a:32:42:ef:cc:f2:f9:81:ae:9a:a2:59:23:1f:8a:
27:39:7f:8f:31:20:c0:1c:5b:ea:63:93:b7:ef:12:21:f2:6d:
13:b9:3b:60:0b:dd:f0:e0:8a:0e:5b:0e:db:ab:56:fa:5e:e8:
5a:97:fb:bd:a7:38:c3:48:80:ba:1e:44:c5:40:83:cc:9d:b3:
61:c6:cd:72:38:3b:4e:2d:53:ca:de:3b:e8:f6:cb:25:df:29:
d8:c0:e0:da:b3:93:fc:ed:09:f8:f4:66:2b:ea:22:3f:22:a3:
f3:27:ea:fc:f4:44:fd:77:3e:36:a3:fe:3e:93:3a:3b:67:72:
42:99:63:06:31:21:c7:55:7b:b0:a0:d1:eb:32:11:e5:db:45:
54:5a:be:7a:65:ab:2c:ce:09:78:50:e7:df:da:45:10:76:0f:
57:40:5b:8e:c4:d5:bf:27:32:cb:c2:20:a6:7a:4e:6e:ef:9d:
68:0c:f9:1b:d8:81:68:ea:07:12:77:cd:a4:f4:c2:e8:22:f6:
46:82:5b:4e:33:ad:5f:bf:3b:4b:f2:40:24:ab:de:fd:87:7e:
7c:52:54:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:48:18 2026 by rpki-client